@cleanslop/cli 0.0.0-stage → 0.1.0-beta.1.2

package/dist/main.d.ts

@@ -0,0 +1,6 @@
+import { type CliDeps } from "./deps.js";
+import type { ParsedArgs } from "./types.js";
+export declare function printHelp(deps: CliDeps): number;
+export declare function printVersion(deps: CliDeps): number;
+export declare function dispatch(deps: CliDeps, args: ParsedArgs): Promise<number>;
+export declare function runCli(argv: string[], overrides?: Partial<CliDeps>): Promise<number>;

package/dist/main.js

@@ -0,0 +1,75 @@
+import { writeAction } from "./action.js";
+import { HELP_TEXT, parseArgs } from "./args.js";
+import { runCredits } from "./commands/credits.js";
+import { runLinkIdentity } from "./commands/link-identity.js";
+import { runLogin } from "./commands/login.js";
+import { runLogout } from "./commands/logout.js";
+import { runEmail } from "./commands/email.js";
+import { runReport } from "./commands/report.js";
+import { runScan } from "./commands/scan.js";
+import { runSetup } from "./commands/setup.js";
+import { runStatus } from "./commands/status.js";
+import { runWhoami } from "./commands/whoami.js";
+import { PACKAGE_NAME, PACKAGE_VERSION } from "./config.js";
+import { mergeDeps } from "./deps.js";
+import { CliError, EXIT_OK, EXIT_UNEXPECTED } from "./exit.js";
+export function printHelp(deps) {
+    deps.io.stdout(HELP_TEXT);
+    return EXIT_OK;
+}
+export function printVersion(deps) {
+    deps.io.stdout(`${PACKAGE_NAME} ${PACKAGE_VERSION}\n`);
+    return EXIT_OK;
+}
+export async function dispatch(deps, args) {
+    if (args.help)
+        return printHelp(deps);
+    if (args.version)
+        return printVersion(deps);
+    switch (args.command) {
+        case "login":
+            return runLogin(deps, args);
+        case "logout":
+            return runLogout(deps);
+        case "whoami":
+            return runWhoami(deps, args);
+        case "scan":
+            return runScan(deps, args);
+        case "status":
+            return runStatus(deps, args);
+        case "report":
+            return runReport(deps, args);
+        case "setup":
+            return runSetup(deps, args);
+        case "email":
+            return runEmail(deps, args);
+        case "link-identity":
+            return runLinkIdentity(deps, args);
+        case "credits":
+            return runCredits(deps, args);
+        default: {
+            const _exhaustive = args.command;
+            return _exhaustive;
+        }
+    }
+}
+export async function runCli(argv, overrides = {}) {
+    const deps = mergeDeps(overrides);
+    try {
+        const args = parseArgs(argv, deps.defaultWaitMs);
+        return await dispatch(deps, args);
+    }
+    catch (err) {
+        if (err instanceof CliError) {
+            if (err.action)
+                writeAction(deps, err.action);
+            if (err.message)
+                deps.io.stderr(`${err.message}\n`);
+            return err.exitCode;
+        }
+        const message = err instanceof Error ? err.message : String(err);
+        deps.io.stderr(`${message}\n`);
+        return EXIT_UNEXPECTED;
+    }
+}
+//# sourceMappingURL=main.js.map

package/dist/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAgB,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAG/D,MAAM,UAAU,SAAS,CAAC,IAAa;IACrC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC1B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAa;IACxC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,YAAY,IAAI,eAAe,IAAI,CAAC,CAAC;IACvD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,IAAa,EACb,IAAgB;IAEhB,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5C,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,KAAK,OAAO;YACV,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9B,KAAK,QAAQ;YACX,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;QACzB,KAAK,QAAQ;YACX,OAAO,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/B,KAAK,MAAM;YACT,OAAO,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,KAAK,QAAQ;YACX,OAAO,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/B,KAAK,QAAQ;YACX,OAAO,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/B,KAAK,OAAO;YACV,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9B,KAAK,OAAO;YACV,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9B,KAAK,eAAe;YAClB,OAAO,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrC,KAAK,SAAS;YACZ,OAAO,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChC,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,WAAW,GAAU,IAAI,CAAC,OAAO,CAAC;YACxC,OAAO,WAAW,CAAC;QACrB,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,IAAc,EACd,YAA8B,EAAE;IAEhC,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACjD,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;YAC5B,IAAI,GAAG,CAAC,MAAM;gBAAE,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YAC9C,IAAI,GAAG,CAAC,OAAO;gBAAE,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;YACpD,OAAO,GAAG,CAAC,QAAQ,CAAC;QACtB,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;QAC/B,OAAO,eAAe,CAAC;IACzB,CAAC;AACH,CAAC"}

package/dist/mcp-config.d.ts

@@ -0,0 +1,13 @@
+import type { CliDeps } from "./deps.js";
+export type McpHttpServer = {
+    type?: "http";
+    url: string;
+};
+export declare function mcpEndpoint(origin: string): string;
+export declare function parseJsonObject(raw: string): Record<string, unknown> | null;
+export declare function mergeMcpServers(existing: Record<string, unknown>, name: string, server: McpHttpServer): Record<string, unknown>;
+export declare function removeMcpServer(existing: Record<string, unknown>, name: string): Record<string, unknown>;
+export declare function writeMcpJson(deps: CliDeps, path: string, mutate: (current: Record<string, unknown>) => Record<string, unknown>): void;
+export declare function claudeMcpAddCommand(origin: string): string;
+export declare function codexMcpAddCommand(origin: string): string;
+export declare function codexMcpLoginCommand(): string;

package/dist/mcp-config.js

@@ -0,0 +1,65 @@
+import { dirname } from "node:path";
+import { CliError, EXIT_USAGE } from "./exit.js";
+export function mcpEndpoint(origin) {
+    return `${origin.replace(/\/$/, "")}/mcp`;
+}
+export function parseJsonObject(raw) {
+    try {
+        const parsed = JSON.parse(raw);
+        if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+            return parsed;
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+export function mergeMcpServers(existing, name, server) {
+    const current = existing.mcpServers;
+    const map = current && typeof current === "object" && !Array.isArray(current)
+        ? { ...current }
+        : {};
+    map[name] = { type: "http", url: server.url };
+    return { ...existing, mcpServers: map };
+}
+export function removeMcpServer(existing, name) {
+    const current = existing.mcpServers;
+    if (!current || typeof current !== "object" || Array.isArray(current)) {
+        return existing;
+    }
+    const map = { ...current };
+    delete map[name];
+    const next = { ...existing };
+    if (Object.keys(map).length === 0) {
+        delete next.mcpServers;
+    }
+    else {
+        next.mcpServers = map;
+    }
+    return next;
+}
+export function writeMcpJson(deps, path, mutate) {
+    let current = {};
+    if (deps.fs.exists(path)) {
+        const parsed = parseJsonObject(deps.fs.read(path));
+        if (!parsed) {
+            throw new CliError(`Refusing to overwrite invalid JSON at ${path}. Fix or remove that file and re-run setup.`, EXIT_USAGE);
+        }
+        current = parsed;
+    }
+    const next = mutate(current);
+    const mode = deps.fs.exists(path) ? deps.fs.statMode(path) : 0o644;
+    deps.fs.mkdir(dirname(path), 0o755);
+    deps.fs.write(path, `${JSON.stringify(next, null, 2)}\n`, mode);
+}
+export function claudeMcpAddCommand(origin) {
+    return `claude mcp add --transport http --scope user cleanslop ${mcpEndpoint(origin)}`;
+}
+export function codexMcpAddCommand(origin) {
+    return `codex mcp add cleanslop --url ${mcpEndpoint(origin)}`;
+}
+export function codexMcpLoginCommand() {
+    return "codex mcp login cleanslop";
+}
+//# sourceMappingURL=mcp-config.js.map

package/dist/mcp-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-config.js","sourceRoot":"","sources":["../src/mcp-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAOjD,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,OAAO,MAAiC,CAAC;QAC3C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,QAAiC,EACjC,IAAY,EACZ,MAAqB;IAErB,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC;IACpC,MAAM,GAAG,GACP,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAC/D,CAAC,CAAC,EAAE,GAAI,OAAmC,EAAE;QAC7C,CAAC,CAAC,EAAE,CAAC;IACT,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;IAC9C,OAAO,EAAE,GAAG,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,QAAiC,EACjC,IAAY;IAEZ,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC;IACpC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,GAAG,EAAE,GAAI,OAAmC,EAAE,CAAC;IACxD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;IACjB,MAAM,IAAI,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;IAC7B,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,IAAa,EACb,IAAY,EACZ,MAAqE;IAErE,IAAI,OAAO,GAA4B,EAAE,CAAC;IAC1C,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,QAAQ,CAChB,yCAAyC,IAAI,6CAA6C,EAC1F,UAAU,CACX,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACnE,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,OAAO,0DAA0D,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,OAAO,iCAAiC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,2BAA2B,CAAC;AACrC,CAAC"}

package/dist/output.d.ts

@@ -0,0 +1,9 @@
+import type { CliDeps } from "./deps.js";
+import type { AgentScan } from "./types.js";
+export declare function writeJson(deps: CliDeps, value: unknown): void;
+export declare function writeMarkdownReport(deps: CliDeps, markdown: string): void;
+export declare function scanLine(scan: AgentScan): string;
+export declare function formatEtaLine(scan: Pick<AgentScan, "eta" | "elapsedSec">): string | null;
+export declare function writeScanNext(deps: CliDeps, scan: Pick<AgentScan, "id" | "next">): void;
+export declare function resetAskEmailPrintedForTests(): void;
+export declare function writeScanProgress(deps: CliDeps, scan: AgentScan): void;

package/dist/output.js

@@ -0,0 +1,65 @@
+export function writeJson(deps, value) {
+    deps.io.stdout(`${JSON.stringify(value)}\n`);
+}
+export function writeMarkdownReport(deps, markdown) {
+    const text = markdown.endsWith("\n") ? markdown : `${markdown}\n`;
+    deps.io.stdout(text);
+}
+export function scanLine(scan) {
+    const bits = [
+        `id=${scan.id}`,
+        `status=${scan.status}`,
+        `final=${scan.final ? "true" : "false"}`,
+    ];
+    if (scan.commitSha)
+        bits.push(`commit=${scan.commitSha.slice(0, 7)}`);
+    if (typeof scan.findingCount === "number") {
+        bits.push(`findings=${scan.findingCount}`);
+    }
+    return bits.join(" ");
+}
+export function formatEtaLine(scan) {
+    if (!scan.eta)
+        return null;
+    const minMin = Math.max(1, Math.round(scan.eta.minSec / 60));
+    const maxMin = Math.max(minMin, Math.round(scan.eta.maxSec / 60));
+    const range = minMin === maxMin ? `${minMin} min` : `${minMin}–${maxMin} min`;
+    const elapsed = scan.elapsedSec != null
+        ? scan.elapsedSec < 90
+            ? `${scan.elapsedSec}s elapsed`
+            : `${Math.round(scan.elapsedSec / 60)} min elapsed`
+        : null;
+    return elapsed ? `ETA ${range} (${elapsed})` : `ETA ${range}`;
+}
+const printedAskEmailScanIds = new Set();
+export function writeScanNext(deps, scan) {
+    if (scan.next?.action !== "ask_email")
+        return;
+    if (printedAskEmailScanIds.has(scan.id))
+        return;
+    printedAskEmailScanIds.add(scan.id);
+    deps.io.stderr([
+        "CLEANSLOP_ACTION_REQUIRED: ask_email",
+        "",
+        `This scan may take a while. Run \`cleanslop email ${scan.id}\` to get the exact masked-recipient question, ask the human, and if they agree rerun with \`--consent "<that exact question>"\`. Never open, approve, or pay yourself.`,
+        "",
+    ].join("\n"));
+}
+export function resetAskEmailPrintedForTests() {
+    printedAskEmailScanIds.clear();
+}
+export function writeScanProgress(deps, scan) {
+    deps.io.stderr(`${scanLine(scan)}\n`);
+    if (scan.progress) {
+        deps.io.stderr(`${scan.progress.label}\n`);
+    }
+    const eta = formatEtaLine(scan);
+    if (eta) {
+        deps.io.stderr(`${eta}\n`);
+    }
+    if (scan.error) {
+        deps.io.stderr(`${scan.error.message}\n`);
+    }
+    writeScanNext(deps, scan);
+}
+//# sourceMappingURL=output.js.map

package/dist/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../src/output.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,SAAS,CAAC,IAAa,EAAE,KAAc;IACrD,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAa,EAAE,QAAgB;IACjE,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,CAAC;IAClE,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAe;IACtC,MAAM,IAAI,GAAG;QACX,MAAM,IAAI,CAAC,EAAE,EAAE;QACf,UAAU,IAAI,CAAC,MAAM,EAAE;QACvB,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE;KACzC,CAAC;IACF,IAAI,IAAI,CAAC,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACtE,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,IAA2C;IAE3C,IAAI,CAAC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,MAAM,MAAM,CAAC;IAC9E,MAAM,OAAO,GACX,IAAI,CAAC,UAAU,IAAI,IAAI;QACrB,CAAC,CAAC,IAAI,CAAC,UAAU,GAAG,EAAE;YACpB,CAAC,CAAC,GAAG,IAAI,CAAC,UAAU,WAAW;YAC/B,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,cAAc;QACrD,CAAC,CAAC,IAAI,CAAC;IACX,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC;AAChE,CAAC;AAED,MAAM,sBAAsB,GAAG,IAAI,GAAG,EAAU,CAAC;AAEjD,MAAM,UAAU,aAAa,CAC3B,IAAa,EACb,IAAoC;IAEpC,IAAI,IAAI,CAAC,IAAI,EAAE,MAAM,KAAK,WAAW;QAAE,OAAO;IAC9C,IAAI,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO;IAChD,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpC,IAAI,CAAC,EAAE,CAAC,MAAM,CACZ;QACE,sCAAsC;QACtC,EAAE;QACF,qDAAqD,IAAI,CAAC,EAAE,yKAAyK;QACrO,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B;IAC1C,sBAAsB,CAAC,KAAK,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAa,EAAE,IAAe;IAC9D,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,GAAG,EAAE,CAAC;QACR,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;IAC5C,CAAC;IACD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC5B,CAAC"}

package/dist/pack.d.ts

@@ -0,0 +1,30 @@
+import type { CliDeps } from "./deps.js";
+export type PackExclusion = {
+    path: string;
+    reason: string;
+};
+export type PackFile = {
+    relativePath: string;
+    bytes: number;
+};
+export type PackPlan = {
+    root: string;
+    files: PackFile[];
+    excluded: PackExclusion[];
+    fileCount: number;
+    bytes: number;
+    dirty: boolean;
+    remote?: string;
+    commitSha?: string;
+    directoryName: string;
+    pathHash: string;
+};
+export declare function isSecretDeniedPath(relativePath: string): string | null;
+export declare function planPack(deps: CliDeps, cwd?: string): Promise<PackPlan>;
+export declare function formatPackSummary(plan: PackPlan, dryRun: boolean): string;
+export declare function assertPackedArchiveFitsUpload(bytes: number): void;
+export declare function writePackArchive(plan: PackPlan): Promise<{
+    bytes: Buffer;
+    sha256: string;
+}>;
+export declare function packManifest(plan: PackPlan, contentSha256: string): Record<string, unknown>;

package/dist/pack.js

@@ -0,0 +1,283 @@
+import { createHash } from "node:crypto";
+import { lstat, readdir, readFile } from "node:fs/promises";
+import { basename, join, relative, resolve, sep } from "node:path";
+import { PACK_MAX_ARCHIVE_BYTES, PACK_MAX_FILE_BYTES } from "./config.js";
+import { sourceError } from "./exit.js";
+import { gitToplevel } from "./git.js";
+import { createUstar, gzipDeterministic } from "./ustar.js";
+const WALK_SKIP_DIRS = new Set([
+    ".git",
+    ".hg",
+    ".svn",
+    "node_modules",
+    "dist",
+    "build",
+    "coverage",
+    ".next",
+    ".turbo",
+    ".cache",
+    ".vercel",
+    ".output",
+    "vendor",
+    "__pycache__",
+    ".venv",
+    "venv",
+    "target",
+    "out",
+]);
+const BINARY_EXT = new Set([
+    ".png",
+    ".jpg",
+    ".jpeg",
+    ".gif",
+    ".webp",
+    ".ico",
+    ".bmp",
+    ".pdf",
+    ".zip",
+    ".gz",
+    ".tgz",
+    ".bz2",
+    ".xz",
+    ".7z",
+    ".rar",
+    ".wasm",
+    ".so",
+    ".dylib",
+    ".dll",
+    ".exe",
+    ".bin",
+    ".class",
+    ".jar",
+    ".woff",
+    ".woff2",
+    ".ttf",
+    ".otf",
+    ".eot",
+    ".mp3",
+    ".mp4",
+    ".mov",
+    ".avi",
+    ".wav",
+    ".webm",
+]);
+function posixPath(relativePath) {
+    return relativePath.split(sep).join("/");
+}
+function comparePosix(a, b) {
+    return a < b ? -1 : a > b ? 1 : 0;
+}
+export function isSecretDeniedPath(relativePath) {
+    const posix = posixPath(relativePath);
+    const base = posix.split("/").pop() ?? posix;
+    if (posix === ".git" || posix.startsWith(".git/"))
+        return "git metadata";
+    if (posix.split("/").includes(".ssh") || posix.startsWith(".ssh/")) {
+        return "secret path";
+    }
+    if (posix.split("/").includes(".aws") || posix.startsWith(".aws/")) {
+        return "secret path";
+    }
+    if (posix === ".docker/config.json" || posix.endsWith("/.docker/config.json")) {
+        return "secret config";
+    }
+    if (/^\.env(?!\.example$)/i.test(base))
+        return "secret env file";
+    if (base === ".dev.vars" || base === ".netrc")
+        return "secret config";
+    if (base === ".npmrc" || base === ".pypirc")
+        return "secret config";
+    if (/\.pem$/i.test(base) || /\.key$/i.test(base) || /\.p12$/i.test(base)) {
+        return "secret key";
+    }
+    if (/\.jks$/i.test(base) || /\.keystore$/i.test(base))
+        return "secret key";
+    if (/^id_(rsa|ed25519|ecdsa|dsa)(-[a-z0-9]+)?$/i.test(base)) {
+        return "secret key";
+    }
+    if (/\.tfstate/i.test(base))
+        return "secret terraform";
+    if (/service-account.*\.json$/i.test(base))
+        return "secret credentials";
+    if (/firebase-adminsdk.*\.json$/i.test(base))
+        return "secret credentials";
+    if (/^credentials.*\.json$/i.test(base))
+        return "secret credentials";
+    return null;
+}
+function isBinaryPath(relativePath) {
+    const base = relativePath.split(sep).pop() ?? relativePath;
+    const dot = base.lastIndexOf(".");
+    if (dot < 0)
+        return false;
+    return BINARY_EXT.has(base.slice(dot).toLowerCase());
+}
+async function listGitFiles(deps, root) {
+    const listed = await deps.git(["ls-files", "-co", "--exclude-standard"], root);
+    if (!listed.ok)
+        return null;
+    return listed.stdout
+        .split("\n")
+        .map((line) => line.trim())
+        .filter(Boolean);
+}
+async function walkFiles(root) {
+    const out = [];
+    async function walk(dir) {
+        const entries = await readdir(dir, { withFileTypes: true });
+        for (const entry of entries) {
+            if (WALK_SKIP_DIRS.has(entry.name))
+                continue;
+            const abs = join(dir, entry.name);
+            const rel = relative(root, abs);
+            if (entry.isSymbolicLink())
+                continue;
+            if (entry.isDirectory()) {
+                await walk(abs);
+                continue;
+            }
+            if (entry.isFile())
+                out.push(rel);
+        }
+    }
+    await walk(root);
+    return out;
+}
+function isSkippedDirPath(relativePath) {
+    return relativePath.split(/[\\/]/).some((part) => WALK_SKIP_DIRS.has(part));
+}
+async function classifyFile(root, relativePath) {
+    if (isSkippedDirPath(relativePath)) {
+        return { path: relativePath, reason: "ignored directory" };
+    }
+    const secret = isSecretDeniedPath(relativePath);
+    if (secret)
+        return { path: relativePath, reason: secret };
+    if (isBinaryPath(relativePath)) {
+        return { path: relativePath, reason: "binary" };
+    }
+    const abs = join(root, relativePath);
+    let info;
+    try {
+        info = await lstat(abs);
+    }
+    catch {
+        return { path: relativePath, reason: "missing" };
+    }
+    if (info.isSymbolicLink())
+        return { path: relativePath, reason: "symlink" };
+    if (!info.isFile())
+        return { path: relativePath, reason: "not a file" };
+    if (info.size > PACK_MAX_FILE_BYTES) {
+        return { path: relativePath, reason: "over 2 MB" };
+    }
+    return { relativePath, bytes: info.size };
+}
+export async function planPack(deps, cwd = deps.env.cwd()) {
+    const top = await gitToplevel(deps, cwd);
+    const root = resolve(top ?? cwd);
+    const gitFiles = top ? await listGitFiles(deps, root) : null;
+    const listed = gitFiles ?? (await walkFiles(root));
+    const files = [];
+    const excluded = [];
+    for (const rel of listed) {
+        const classified = await classifyFile(root, rel);
+        if ("reason" in classified)
+            excluded.push(classified);
+        else
+            files.push(classified);
+    }
+    files.sort((a, b) => comparePosix(posixPath(a.relativePath), posixPath(b.relativePath)));
+    excluded.sort((a, b) => comparePosix(a.path, b.path));
+    const bytes = files.reduce((sum, file) => sum + file.bytes, 0);
+    if (files.length === 0) {
+        throw sourceError("Nothing to upload after applying ignore and secret filters.");
+    }
+    let dirty = !top;
+    let remote;
+    let commitSha;
+    if (top) {
+        const status = await deps.git(["status", "--porcelain"], root);
+        dirty = status.ok && status.stdout.trim().length > 0;
+        const origin = await deps.git(["remote", "get-url", "origin"], root);
+        if (origin.ok && origin.stdout.trim())
+            remote = origin.stdout.trim();
+        const head = await deps.git(["rev-parse", "HEAD"], root);
+        if (head.ok && head.stdout.trim())
+            commitSha = head.stdout.trim();
+    }
+    const directoryName = basename(root) || "upload";
+    const pathHash = createHash("sha256").update(root).digest("hex").slice(0, 32);
+    return {
+        root,
+        files,
+        excluded,
+        fileCount: files.length,
+        bytes,
+        dirty,
+        remote,
+        commitSha,
+        directoryName,
+        pathHash,
+    };
+}
+export function formatPackSummary(plan, dryRun) {
+    const lines = [
+        dryRun ? "Would upload:" : "Uploading:",
+        `  ${plan.fileCount} files, ${plan.bytes} bytes`,
+        `  directory ${plan.directoryName}`,
+    ];
+    if (plan.remote)
+        lines.push(`  remote ${plan.remote}`);
+    const topExcluded = plan.excluded.slice(0, 8);
+    if (topExcluded.length > 0) {
+        lines.push("  excluded:");
+        for (const item of topExcluded) {
+            lines.push(`    ${item.path} (${item.reason})`);
+        }
+        if (plan.excluded.length > topExcluded.length) {
+            lines.push(`    … ${plan.excluded.length - topExcluded.length} more`);
+        }
+    }
+    return `${lines.join("\n")}\n`;
+}
+export function assertPackedArchiveFitsUpload(bytes) {
+    if (bytes > PACK_MAX_ARCHIVE_BYTES) {
+        throw sourceError(`Packed archive is ${bytes} bytes; the upload limit is 100 MB.`);
+    }
+}
+export async function writePackArchive(plan) {
+    const entries = [];
+    for (const file of plan.files) {
+        const posix = posixPath(file.relativePath);
+        const abs = join(plan.root, file.relativePath);
+        const info = await lstat(abs);
+        if (info.isSymbolicLink()) {
+            throw sourceError(`Refusing to pack symlink ${posix}.`);
+        }
+        if (!info.isFile()) {
+            throw sourceError(`Refusing to pack non-file ${posix}.`);
+        }
+        entries.push({ name: posix, content: await readFile(abs) });
+    }
+    const tar = createUstar(entries);
+    const gz = gzipDeterministic(tar);
+    assertPackedArchiveFitsUpload(gz.byteLength);
+    return {
+        bytes: gz,
+        sha256: createHash("sha256").update(gz).digest("hex"),
+    };
+}
+export function packManifest(plan, contentSha256) {
+    return {
+        remote: plan.remote,
+        commitSha: plan.commitSha,
+        dirty: plan.dirty,
+        fileCount: plan.fileCount,
+        bytes: plan.bytes,
+        contentSha256,
+        directoryName: plan.directoryName,
+        pathHash: plan.pathHash,
+    };
+}
+//# sourceMappingURL=pack.js.map

package/dist/pack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pack.js","sourceRoot":"","sources":["../src/pack.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAE1E,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAkB,MAAM,YAAY,CAAC;AAE5E,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,MAAM;IACN,KAAK;IACL,MAAM;IACN,cAAc;IACd,MAAM;IACN,OAAO;IACP,UAAU;IACV,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,SAAS;IACT,QAAQ;IACR,aAAa;IACb,OAAO;IACP,MAAM;IACN,QAAQ;IACR,KAAK;CACN,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,KAAK;IACL,KAAK;IACL,MAAM;IACN,OAAO;IACP,KAAK;IACL,QAAQ;IACR,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,OAAO;IACP,QAAQ;IACR,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;CACR,CAAC,CAAC;AAyBH,SAAS,SAAS,CAAC,YAAoB;IACrC,OAAO,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,YAAY,CAAC,CAAS,EAAE,CAAS;IACxC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,YAAoB;IACrD,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC;IAC7C,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,cAAc,CAAC;IACzE,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACnE,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACnE,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,IAAI,KAAK,KAAK,qBAAqB,IAAI,KAAK,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;QAC9E,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,iBAAiB,CAAC;IACjE,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,eAAe,CAAC;IACtE,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,eAAe,CAAC;IACpE,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzE,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC;IAC3E,IAAI,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5D,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,kBAAkB,CAAC;IACvD,IAAI,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,oBAAoB,CAAC;IACxE,IAAI,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,oBAAoB,CAAC;IAC1E,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,oBAAoB,CAAC;IACrE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,YAAoB;IACxC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,YAAY,CAAC;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1B,OAAO,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAa,EAAE,IAAY;IACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,oBAAoB,CAAC,EAAE,IAAI,CAAC,CAAC;IAC/E,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,MAAM,CAAC,MAAM;SACjB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAY;IACnC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,UAAU,IAAI,CAAC,GAAW;QAC7B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAChC,IAAI,KAAK,CAAC,cAAc,EAAE;gBAAE,SAAS;YACrC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChB,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IACD,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,gBAAgB,CAAC,YAAoB;IAC5C,OAAO,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,IAAY,EACZ,YAAoB;IAEpB,IAAI,gBAAgB,CAAC,YAAY,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC7D,CAAC;IACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAChD,IAAI,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC1D,IAAI,YAAY,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAClD,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACrC,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACnD,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC5E,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACxE,IAAI,IAAI,CAAC,IAAI,GAAG,mBAAmB,EAAE,CAAC;QACpC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACrD,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAa,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE;IAChE,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,MAAM,MAAM,GAAG,QAAQ,IAAI,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACjD,IAAI,QAAQ,IAAI,UAAU;YAAE,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;;YACjD,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9B,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACzF,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,WAAW,CAAC,6DAA6D,CAAC,CAAC;IACnF,CAAC;IAED,IAAI,KAAK,GAAG,CAAC,GAAG,CAAC;IACjB,IAAI,MAA0B,CAAC;IAC/B,IAAI,SAA6B,CAAC;IAClC,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,CAAC;QAC/D,KAAK,GAAG,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;QACrE,IAAI,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;YAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACrE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;YAAE,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACpE,CAAC;IAED,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC;IACjD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9E,OAAO;QACL,IAAI;QACJ,KAAK;QACL,QAAQ;QACR,SAAS,EAAE,KAAK,CAAC,MAAM;QACvB,KAAK;QACL,KAAK;QACL,MAAM;QACN,SAAS;QACT,aAAa;QACb,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAc,EAAE,MAAe;IAC/D,MAAM,KAAK,GAAG;QACZ,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,YAAY;QACvC,KAAK,IAAI,CAAC,SAAS,WAAW,IAAI,CAAC,KAAK,QAAQ;QAChD,eAAe,IAAI,CAAC,aAAa,EAAE;KACpC,CAAC;IACF,IAAI,IAAI,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9C,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1B,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC;YAC9C,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,OAAO,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,KAAa;IACzD,IAAI,KAAK,GAAG,sBAAsB,EAAE,CAAC;QACnC,MAAM,WAAW,CACf,qBAAqB,KAAK,qCAAqC,CAChE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAc;IAEd,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,MAAM,WAAW,CAAC,4BAA4B,KAAK,GAAG,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,MAAM,WAAW,CAAC,6BAA6B,KAAK,GAAG,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,EAAE,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAClC,6BAA6B,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;IAC7C,OAAO;QACL,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,IAAc,EACd,aAAqB;IAErB,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,aAAa;QACb,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC;AACJ,CAAC"}

package/dist/redact.d.ts

@@ -0,0 +1,2 @@
+export declare function redactSecrets(text: string): string;
+export declare function tokenLast4(token: string): string;

package/dist/redact.js

@@ -0,0 +1,17 @@
+import { TOKEN_RE } from "./config.js";
+const PRIVATE_TOKEN_RE = /PrivateToken\s+token\s*=\s*"[^"]*"/gi;
+const JWT_RE = /eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g;
+const SPT_RE = /spt_[A-Za-z0-9_]+/g;
+export function redactSecrets(text) {
+    return text
+        .replace(TOKEN_RE, "cslop_***")
+        .replace(PRIVATE_TOKEN_RE, 'PrivateToken token="***"')
+        .replace(JWT_RE, "[redacted-jwt]")
+        .replace(SPT_RE, "spt_***");
+}
+export function tokenLast4(token) {
+    if (token.length < 4)
+        return token;
+    return token.slice(-4);
+}
+//# sourceMappingURL=redact.js.map

package/dist/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../src/redact.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,MAAM,gBAAgB,GAAG,sCAAsC,CAAC;AAChE,MAAM,MAAM,GAAG,wDAAwD,CAAC;AACxE,MAAM,MAAM,GAAG,oBAAoB,CAAC;AAEpC,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,IAAI;SACR,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC;SAC9B,OAAO,CAAC,gBAAgB,EAAE,0BAA0B,CAAC;SACrD,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC;SACjC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACzB,CAAC"}

package/dist/skill.d.ts

@@ -0,0 +1,10 @@
+export declare const SKILL_HEADINGS: readonly ["When to scan", "Git preconditions", "Transport", "Connect with Link", "Relay human actions", "Waiting", "Reading the report", "Fix loop", "Stop conditions", "Report back", "Email", "Never print tokens"];
+export declare function skillCorePath(): string;
+export declare function loadSkillCore(readFile?: (path: string) => string): string;
+export declare function renderSkillMd(core: string): string;
+export declare function renderCursorMdc(core: string): string;
+export declare function renderAgentsSnippet(core: string): string;
+export declare function wrapOwnedFile(content: string): string;
+export declare function upsertMarkerBlock(existing: string, block: string): string;
+export declare function removeMarkerBlock(existing: string): string;
+export declare function assertSkillCoreComplete(core: string): string[];